Privacy Policy

This policy explains what the Buttonly apps do with your data. It covers the Android apps Buttonly Translate and Buttonly Remember. The rules for using the apps are in our Terms of Use.

This policy is written in English and translated. If a translation is unclear or says something different from the English text, the meaning that is more favourable to you applies.

The short version

• There are no accounts, no advertising, no analytics and no tracking. We do not sell your data.
• To understand you, the apps send your voice recording through our server to Google’s Gemini artificial intelligence. Our server does not save your recordings or your words.
• What the apps keep — the Translate history and your Remember records — is stored on your phone. Remember records are also included in your phone’s Google backup, if backup is turned on.
• Gemini usually processes your requests in the European Union, but sometimes outside it (details).
• Your records in Remember may contain information about your health, so Remember works only with your explicit consent. You can withdraw it at any time (details).
• The apps are for adults only (18+).

Who is responsible

The apps are made by Liashko, trading as Buttonly, Sir Winston Churchilllaan 843A, 2286 AA Rijswijk, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 84903481.

We are responsible for your personal data in the apps (the “controller” under the EU General Data Protection Regulation, GDPR).

Questions about privacy: support@buttonly.app.

Words used in this policy

• Our server — the Buttonly server. It runs on Google Cloud in the Netherlands (region europe-west4). Both apps use it.
• Gemini — Google’s artificial intelligence models, which we use through Google Cloud. Gemini listens to a recording, writes down what was said, translates it or answers a question.
• On your phone — in the app’s own storage on your phone. Other apps cannot read it.

What both apps have in common

The microphone

The apps use the microphone only after you press the big button. They stop when you finish speaking, when you press the button again, or at the maximum length of a phrase. They never listen in the background. Before the first recording, each app shows a short notice with a link to this policy. In Remember, you give your consent in this notice (details).

No accounts, ads, analytics or tracking

You do not sign in. The apps contain no advertising, no analytics and no crash-reporting tools, and they do not follow you across other apps or websites.

The apps use two Google Firebase services: App Check (see the next section) and Cloud Firestore, which receives only the reports you choose to send.

Checking that the app is genuine

To protect our server from misuse, every request carries a token from Firebase App Check. To get it, the app asks Google Play services on your phone for a Play Integrity check.

For this check, Google receives information about the app (its name, version and signature), its Google Play licence status for the Google accounts on the phone, and checking data generated by your device. Google uses it to confirm that the request comes from the genuine app on a genuine, unmodified device. Google handles this check under the Google Play Terms of Service (what Google collects).

The token contains nothing that you said. Our server checks the token and does not store it.

What our server keeps

• Our server does not save your recordings, transcripts, translations, records or questions. It passes them to Gemini and sends the answer back to your phone.
• If your phone loses the connection and sends the same request again, the server should not process it twice. So it keeps each answer in its working memory (not on disk) for up to 5 minutes, and then deletes it.
• For every request, the server writes a technical log line: the time, the app, the server address it called, the result (and the technical error, if there was one), how long it took, which Gemini model and region answered and how many “tokens” (units of text and sound) were used. It writes one more line of the same kind for each call to Gemini.
• Google Cloud also records the request’s IP address and “user agent” — a short text the phone sends with every request, which names the Android version and the phone model.
• The logs never contain your voice or your words.
• The logs are kept in Google Cloud Logging in the Netherlands (region europe-west4) for 30 days (log lines written before 17 October 2026 stay in Google’s global logging storage until they expire, at the latest on 16 November 2026) and then deleted automatically.

Checking the internet connection

If an answer takes longer than usual, the app may send one empty request to connectivitycheck.gstatic.com. This is a Google address that Android itself uses to check internet access. It tells the app whether your internet or our service is slow. Like any internet request, it shows your IP address to Google, but nothing else about you.

The app’s texts in your language

The apps show their buttons and messages in your language. When an app learns your language for the first time, it sends its own interface texts and the name of your language through our server to Gemini to be translated, and keeps the result on your phone. This request contains nothing you said.

Reading aloud

When you tap the speaker button, the text is read aloud by the text-to-speech engine installed on your phone, which you choose in the Android settings. That engine comes from Google or from your phone’s maker. We receive nothing from it.

Reports of AI results

Gemini can make mistakes. In each app you can report a result of the AI with the small flag on its card. A report is sent only if you tap the flag and confirm.

• Reports go to a Cloud Firestore database in the Netherlands (Google Cloud region europe-west4).
• The app can only add new reports; it cannot read, change or delete them. Only we can read them.
• A report contains no name, account or device identifier. What exactly it contains is described in each app’s section below (Translate, Remember).
• We use reports to find and fix wrong or harmful AI results.
• We keep a report for 6 months. Then it is deleted automatically, usually within a day.

Buttonly Translate

What happens when you speak

1. You press the button and say a phrase.
2. The phone compresses the recording and sends it over an encrypted connection (HTTPS) to our server, together with your language and the language of the person you are talking to.
3. Our server sends the recording and these languages to Gemini. Gemini returns what you said as text, the translation, its pronunciation written in your alphabet, and the names of the languages.
4. Your phone shows the result.

The recording itself is never saved. It is kept only in the app’s working memory, so that the app can send it again if the connection fails. (While the recording is being compressed, it is briefly written to a temporary file, which is deleted straight away.) It disappears when you make a new recording or when the app is closed.

What stays on your phone

• Translation history: the text of your last 30 phrases that were translated into the other person’s language — what you said, the translation, the pronunciation, the languages, the time, and whether you reported it. Also the latest translation into your own language (for example, the other person’s reply), until the next translation. Older entries are deleted automatically. No sound is stored.
• The history is kept in a part of the phone’s storage that Android does not copy to backups, so it never leaves your phone.
• Other app data — your languages and the translated interface texts — may be included in your phone’s Google backup and in a direct transfer to a new phone, if backup is turned on. The app also keeps a record that you accepted the notice: its version and language, when you accepted it, and a fingerprint (hash) of the exact text. This record is not copied to backups, so on a new phone the app shows the notice again.

Deleting

The app has no “delete history” button. To erase the history and everything else the app stores: open the Android Settings → Apps → Buttonly Translate → Storage → Clear data, or uninstall the app. Menu names differ between phones.

Reports

If you report a translation, the report contains: what the app heard you say (as text), the translation, the pronunciation, the language of the translation, your language and the other person’s language, the app version, and the time the report arrived.

Buttonly Remember

Remember keeps what you dictate as text records, answers your questions about them and forgets them when you ask. It is an AI assistant: Gemini understands what you say and writes the answers.

What happens when you speak

• Everything you say — a record, a question or a command such as “Forget…” — is first saved on your phone. It is then sent automatically as soon as there is internet, even if the app is closed.
• With each recording, the phone sends to our server, and our server to Gemini:
  • the recording;
  • the date, time and time zone when you spoke;
  • your language and your phone’s language;
  • your last record;
  • your last question and its answer, if you asked it less than two minutes ago;
  • if the app is waiting for your “yes” or “no” to a “forget” question, a short description of what it is about to forget.
• Which of your records are sent. While you have 50 records or fewer (together no longer than 60,000 characters), all your records are sent with every recording — not only with questions. When you have more, only the records that are needed are sent: for a question, a “forget” command or a correction, the phone picks up to 30 records that fit best (the ones your last answer quoted, by meaning, by the dates you mention, the most recent ones and their corrections) and sends them as text.
• What Gemini returns: your exact words as text and what you wanted: to remember, to ask, to forget or to correct. For a new record, it adds a short title, a type (for example idea, task, health, purchase), the topics, people and dates mentioned, a short confirmation and an example question you could ask. For a question, it returns an answer with a short quote from your records. Our server checks that the quote really is in your record.
• Safety. If what you say suggests you may be in danger or thinking of harming yourself, Gemini marks it, and the app adds a gentle suggestion to talk to someone.
• Search by meaning. So that the app can find records by their meaning, the text of each record and each question is turned into a list of numbers (an “embedding”) by a Google model, through our server. These numbers are stored on your phone next to the record.
• The recording waits on your phone, in storage that is not copied to backups, until Gemini has turned it into text, or until the app gives up on it. Then it is deleted. If you cancel a recording that is waiting, it is deleted too.
• Things the app will not save. If you dictate a bank card number, its security code, a PIN, a password for a bank, email or any account, or a one-time code, the app is designed to refuse to save it. It relies on Gemini to recognise such things, so it may occasionally miss one, and the recording has already been sent to Gemini to be understood. Please do not dictate such things. Simpler codes, such as a door code or a Wi‑Fi password, are saved.
• Health and other sensitive matters. Remember also saves records about your health or how you feel, if you dictate them, and sends them to Gemini like any other record. Such information is sensitive, so Remember processes it only with your explicit consent (details). You decide what to tell the app.

Your consent

• Before the first recording, Remember shows a notice: what is sent to Gemini, where your records are kept, and that what you say about your health is saved and sent to Gemini too. By tapping “Agree”, you give us your explicit consent to process information about your health in this way.
• Without this consent, Remember cannot be used: anything you dictate may be about your health, and the app cannot tell in advance. If you tap “Not now”, nothing is recorded.
• On your phone, Remember keeps a record of your consent: the version and language of the notice, when you agreed, and a fingerprint (a “hash”) of the exact text you saw. It shows what you agreed to.
• You can withdraw your consent at any time. Say “I withdraw my consent”. Remember first offers to send you a copy of all your records (details) and asks you to confirm. Then it deletes from your phone all your records, recordings that are waiting, your last question and answer, the copy files, your settings and the record of your consent, and starts again with the notice. It keeps only two things that contain nothing you said: how many records and questions you have used, so that the free level is given once, and the translated interface texts. To remove these too, clear the app’s data or uninstall the app. Withdrawing does not undo what the app did before.

What stays on your phone

• Your records: your words exactly as Gemini wrote them down, with their title, type, topics, people and dates; the date, time and time zone when you spoke; the language; a link to the earlier record a correction refers to; the example question; and the embedding. They stay until you delete them.
• Settings and counters: your language, which functions you have used, how often hints were shown, how many times the app was opened, how many records and questions you have used, and the name of the embedding model.
• The record of your consent (details). It is not copied to backups: on a new phone, Remember asks for your consent again.
• The copy of your records: the two files stay in the app’s private cache, which is not copied to backups, so that the app you chose can read them. They are deleted the next time you make a copy, when you withdraw your consent, or the first time you open Remember more than a day later.
• Working data: recordings that are waiting, the last card on the screen, your last question and answer (used for a follow-up question within about two minutes) and an unanswered “forget” question. This data is not copied to backups.

Your Google backup

Your records and settings are included in Android’s own backup to your Google account, if you have turned backup on, and in a direct transfer to a new phone.

According to Google, on Android 9 and newer this backup is end-to-end encrypted with your phone’s screen lock (PIN, pattern or password), it is usually made about once a day, and only the latest backup is kept. We cannot read your backup. A record you delete stays in the backup until the next backup is made.

Forgetting and deleting

• Say “Forget what I said about…” — the app finds the matching records and asks you before deleting them.
• Say “Forget the last one” to delete the record you have just made.
• To delete all your records: say “I withdraw my consent” (details). To erase everything the app stores, open the Android Settings → Apps → Buttonly Remember → Storage → Clear data, or uninstall the app. “Forget everything” leads to the same offer and the same confirmation, so that one misheard phrase cannot delete all your records.
• To remove the copy in your Google backup as well, turn off backup or delete the backup in your Google account.

A copy of your records

Say, for example, “Send me all my records”. Remember shows a card with a button. When you tap it, Android’s Share window opens with two files: a text file you can read and a JSON file that other programs can read. You choose where to send them, for example to your email or to Google Drive. Remember never sends the files by itself.

The files contain everything you have said, including about your health, so send them only to people you trust. Getting a copy is always free.

Reports

If you report an answer, the report contains: your question, the answer, the quotes from your records that the answer is based on, the language of the answer, your language, the app version, and the time the report arrived.

The quotes may contain information about your health. So before sending, the app asks for your explicit consent: by tapping “Report” in that question, you agree to send them to us. You can withdraw this consent by writing to us: send us the text of the report and its approximate time, and we will delete it. Otherwise it is deleted after 6 months (details).

Buttonly Remind

Remember does not set reminders; it may tell you that Buttonly Remind, a reminder app of the series, does that. Buttonly Remind has not been released yet. We will update this policy before it is.

Where your data is processed

• Our server: Google Cloud, the Netherlands.
• Gemini: we ask Google to process requests in the EU. Google’s “eu” service keeps the processing within EU member states. If that service is slow or fails, the same request may also be sent to Google’s “global” service, which can process it in any Google Cloud location in the world, including outside the EU, for example in the United States. So we cannot promise that your data always stays in the EU.
• Reports: Cloud Firestore, the Netherlands.
• Technical logs: Google Cloud Logging, the Netherlands.
• App Check and Play Integrity: Google services that may process data outside the EU.

When data leaves the EU, Google protects the transfer under the Cloud Data Processing Addendum, which includes the EU Standard Contractual Clauses. You can read them there or ask us for a copy.

Who processes your data for us

We share your data with these service providers, which process it on our behalf (as “processors”):

• Google Cloud runs our server, the Gemini models and the technical logs.
  • Google states that it does not use this data to train or fine-tune its AI models without our permission.
  • If Google’s automated systems suspect that a request breaks Google’s usage policies, Google may keep it for up to 90 days to check for abuse.
• Google Firebase provides App Check and Cloud Firestore (reports).

Google provides all of these services under the Google Cloud Platform Terms of Service, which include the Cloud Data Processing Addendum.

These Google services work under your own agreement with Google, not on our behalf:

• Google Play services perform the Play Integrity check, under the Google Play Terms of Service.
• Android backup to your Google account, if you have turned it on.
• The internet connection check (connectivitycheck.gstatic.com) receives your IP address, like any Google address on the internet (details).

More about Google: Google Cloud Privacy Notice, Google Privacy Policy.

We disclose data to authorities only if the law requires us to.

Why we use your data, and on what legal basis

• To do what you ask — translate, remember, answer, forget and show the app in your language. This is necessary to provide the app you use, as described in our Terms of Use (GDPR Article 6(1)(b)).
• Health information in Remember belongs to a special category of data. We process it only with your explicit consent, which you give by tapping “Agree” in the notice before the first recording (GDPR Article 9(2)(a)). You can withdraw it at any time (how).
• To give you a copy of your records when you ask: this is our legal obligation (GDPR Articles 15, 20 and 6(1)(c)).
• Reports in Remember may contain quotes about your health. We receive such a report only with your explicit consent, which you give in the question before sending it (GDPR Articles 6(1)(a) and 9(2)(a)). You can withdraw it by writing to us (how).
• Our legitimate interests (GDPR Article 6(1)(f)). For each of them, we have checked that we need the data for it and that your interests do not outweigh it:
  • technical logs with IP address and user agent: to find and fix faults and to notice misuse of our server;
  • App Check and Play Integrity: to protect our server from fake apps and automated misuse, because every request to the AI costs us money;
  • the 5-minute answer memory: so that a request sent again after a lost connection is not processed and paid for twice;
  • the internet connection check: to tell you whether your internet or our service is slow;
  • reports in Translate: to find and fix wrong or harmful translations. Google Play also requires apps with AI-generated content to let people report it. You decide whether to send a report.

You are not required by law or by contract to give us any data. But the apps cannot work without your recording: if you do not speak to the app, nothing is sent.

Your right to object

You can object at any time to our use of your data based on our legitimate interests (listed above), for reasons that relate to your particular situation. Write to support@buttonly.app. We will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need the data to establish, exercise or defend legal claims.

• Our technical logs and reports are not linked to your name. To find your log lines, we need your IP address and the approximate time; to find your report, its text and the approximate time.
• App Check and the technical logs come with every request, because our server cannot work safely without them. While you use an app, we may therefore not be able to stop them; you can stop them at once by not using the app.

How long data is kept

• Translate, the recording: in the app’s memory until it is translated, until your next recording or until the app is closed.
• Remember, the recording: on your phone until it has been turned into text, then deleted.
• On our server: your recording and texts only while the request is processed; the answer up to 5 minutes in memory.
• At Google (Gemini): not kept after the answer (we have turned Gemini’s cache off); up to 90 days only if a request is suspected of abuse.
• Translate history: the last 30 phrases, on your phone, until you clear the app’s data or uninstall the app.
• Remember records: on your phone until you forget them, withdraw your consent, clear the app’s data or uninstall the app; in your Google backup until the next backup after that.
• The record of your consent in Remember: on your phone, until you withdraw your consent, clear the app’s data or uninstall the app.
• The copy of your records: the two files, in the app’s private cache, until the next copy, until you withdraw your consent, or until the first time you open Remember more than a day later.
• Counters of records and questions used in Remember: on your phone and in your Google backup, until you clear the app’s data or uninstall the app; they are kept when you withdraw your consent.
• Technical logs, with IP address and user agent: 30 days, then deleted automatically.
• Reports: 6 months, then deleted automatically, usually within a day.
• Play Integrity data: Google deletes it after a fixed period that Google sets.

No selling, no ads, no tracking

We do not sell or rent your data. We do not show ads, and we do not use your data for advertising or profiling. We do not combine it with data from other sources.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you (GDPR Article 22). Gemini only interprets and answers what you ask.

Children

The apps are intended only for adults, 18 years and older. Google’s terms for its AI services do not allow them in apps meant for people under 18. Please do not let children use the apps. If a child has used one, you can delete everything it stored on the phone as described above; for anything else, contact us.

Your rights

Under the GDPR you have the right to:

• see the personal data we hold about you and get a copy of it;
• have it corrected or deleted;
• limit how we use it, or object to our use based on legitimate interests (details);
• receive the data you have given us in a format you can take elsewhere;
• withdraw your consent at any time, where we rely on it (how);
• complain to a data protection authority.

How to use these rights:

• Most of your data is only on your phone. You can see, correct and delete it there, as described above. Remember also gives you a copy of all your records, as a text file and a JSON file (how). We have no access to this data.
• Our server keeps no copy of your words. The technical logs and reports are not linked to your name or account, so we usually cannot tell which of them are yours. If you want us to find and delete your report, send us its text and the approximate time. To find your log lines, we need your IP address and the approximate time. The logs are deleted automatically after 30 days.
• Write to support@buttonly.app. We will answer within one month. We may ask for the information we need to find your data.
• You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in the EU country where you live.

Security

• All connections between the apps and our server, and between our server and Google, are encrypted (HTTPS).
• Our server accepts requests only from the genuine apps (App Check).
• Our server keeps no user content on disk, and its logs contain none.
• The apps can only add reports; they cannot read them.
• Access to our Google Cloud and Firebase projects is restricted.
• On your phone, the data is in the app’s private storage, which other apps cannot read. Please use a screen lock: it protects your phone and, on Android 9 and newer, encrypts your Google backup.

Changes to this policy

When the apps change how they handle data, we update this page and the date at the top. If a change is important, we will also announce it in the apps or on their Google Play pages.

Contact

• Liashko, trading as Buttonly

• Sir Winston Churchilllaan 843A, 2286 AA Rijswijk, the Netherlands

• KvK: 84903481

• Email: support@buttonly.app

• Phone: +31 6 19889302

• VAT ID (btw-id): NL004034336B89